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ELAMAN works closely with its clients to develop a total 
system solution to their needs and to ensure that they are 
equipped, trained and manned to meet the formi- 
dable challenges in the field of communication. 



Adding new products solutions to our 
portfolio is an ongoing process. There- 
fore from now on ELAMAN 
provides a Newsletter whenever 
important innovations are 
coming up. 



Kind regards 

Your Elaman 
Team 



The compact de- 
sign of the device 
ensures concealed operati- 
on. Absolute reception field 
strength of the respective channel 
is shown on a display (1 dB steps). 
Relative field strength is signaled th- 
rough changing tone pitch or intermit- 
ted sound. 
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Pinpoint localizati- 
on of mobile phones 

The GSM mobile finder 
(GSM-MF) enables pinpoint lo- 
calization of mobile phones. 

The device provides 50 reception 
channels for selection of an unassig- 
ned frequency. The wide range of its 
reception dynamics (-100 dBm to +7 
dBm) ensures localization of both ad- 
jacent and distant mobile phones, in 
combination with active GSM-off-air 
systems (MTL3, GSM XPZ, GA900 
etc.). 

An especially designed aerial enables 
systematic direction detection and, 
thus, a rapid approach to the sought 
mobile phone. 




Mobile Finder 



Blocking & Shaping of IP Traffic 

The CS 2000 has created a new net- 
work applications' platform - a gene- 
ral purpose deep packet processing 
platform combined with an open Li- 
nux server blade. It is designed for ap- 
plications focused on real-time net- 
work traffic processing. 

CS-2000 provides the application de- 
veloper high-speed processing, high- 
speed RAM, a high-speed database, 
and a structured programming langu- 
age for data plane-resident packet 
operations. 

This results in: 

o No more CPU interrupt latency 

o No more PCI bus bandwidth cons- 
traints 

• The power to operate on every pa- 
cket - every bit of every packet - on 
the wire in real-time 

The CS-2000 also provides conventio- 
nal Linux server resources for off-line 
analysis and non real-time application 
functions. 




CS 2000 



• Passive Telephone Line 
Monitoring page 4 

The CS-2000 enables users to imple- 
ment their ideas, build differentiating 
service features: 
e.g. Shaping of IP-Traffic: 

Reducing bandwith for voice over IP 
(VoIP) in order to avoid the usage of 
VoIP in IP networks 
or Blocking of URLs: 

Blocking of Skype, etc. 

The Programming platform for CS 
2000 is PacketWorks IDE (see over- 
view) 



PacketWorks IDE Summary of Benefits: 

Improved Deep Packet Processing Application 
Development 

• Program, compile, and debug CS-2000 application on a PC 

• Comprehensive RAVE program debugger supports: 

- Application break step through 

- LIBPCAP traffic simulation (before and after) 

- Variable tracing 

- Memory use and allocation 

• More traditional text-based RAVE language speeds 
development and supports multi-programmer projects 

• Visual RAVE offers fast GUI-based programming 

• Functional reference utilities available for modification/ 
incorporation into applications 

Fast Path to High-Speed Network Applications 

• Easy access to CloudShield's high-performance, high- 
capacity applications-ready platforms 

• Flexible porting options easily extend performance range of 
existing application to suppoert multi-gigabit deployments 

• Developers ramp up in hours-to-days, not weeks-to-months 

A Complete Developer's Environment 

• Based on widely-deployed Eclipse open framework 

• Available C++, Java, and other language IDE plug-ins 

• Supports team-based CS-2000 applications development 

• Projects / Developers can work with CVS-protected files 
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IP Sniffling & 

Hacking 

Monitoring of IP Data becomes 
more and more important. IP- 
Monitoring Systems currently on 
the market will never be able to 
monitor and demodulate all IP- 
Traffic within IP networks due to 
e.g. encryption, different access 
levels, rerouting, new protocoils, 
VPNs etc. 




Therefore the direct access to a 
PC is the only way to access data. 
Sniffling and Hacking is one way 
to realize this. Elaman provides in 
this ready made products training 
like 

1) FinFisher (USB-Sticks) 

© Finfisherl-Memory stick for 
stripping important data from a 
PC 

°Finfisher2-Memory stick for 
stripping specific files from a 
PC 

°Finfisher3- 

Manipulation/intrusion software 
for unauthorized access to a 
PC 

©Finfisher4-Memory stick/CD 
used to strip 

usernames/passwords from a 
PC 

®Finfisher5- CD used to access a 
PC and change all passwords 

°Finfisher6-Software used to 
remotely extract information 



from 

a target's 
PC, using 
highly encrypted 
links and being 
virtually undetectable 

2) Training in Flacking 

The Fintraining-Basic for one 

week hacking overview-product 
training (advanced course is 
available upon request). 

The Hacking course for two 

weeks includes the issues of 
profiling of foot-printing, scanning 
and enumeration as well as 
attacking of passwords, web 
security, bluetooth, networks, 
wireless LAN, root kits and explo- 
its. 

The VoIP Course for one week 
includes: 

o Type of attacks 
o Practical exercise 



...and keep in mind 



9-12 

October 

...one of the most important 
worldwide exhibition and show 
for special security equipment 
with focus on law inforcement 
agencies. 



© IP Telephony 
Operating 

© System Level Security 
VoIP Network Security 
o Design Considerations 

For further information please 
contact us as we have an accurate 
schedule for the whole course. 




Milip?) 

PARIS 2007 



Finfisher USB Sticks 
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Radio Monitoring 
and Surveillance Soluti- 
ons (RMS) 

Specialized in the application of the 
digital signal processing and pattern 
recognition to communication intelli- 
gence: we have the capability to de- 
sign, produce and deliver complete 
RMS solutions especially for the ope- 
ration of RMS for Law Enforcemnt 
Agencies. We offer comprehensive 
products for signal analysis, auto- 
matic detection & classification, de- 
modulation & decoding, as well as for 
wideband signal acquisition & proces- 
sing. We can supply the whole range, 
from a single stand-alone product to a 
complete RMS solution, from a single 
source. 

©Antennas 

©Tuners 

©Broadband Technology 
©Broadband Search and Direction 
© Finding Systems 
©Signal Analysis 

o Signal Detection and Classification 
o Speech Technology 
©Virtual Devices and PC-Based Ar- 
chitecture 
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Spectrum Analysis 




Counter Surveillance 
Equipment (TSCM): Telepho- 
ne Line Analyzer Detector 

© Digital Demodulation to confirm 
that the telephone line is not 
passing audio (demodulation code 
is upgradeable for new phone 
systems, expected to cover 80% of 
world's PBX/ACD phone systems) 
©Frequency Domain Reflectometer 
(FDR) similar to TDR to check for 
taps on the line 

© NLJD Line Trace Probe for verifying 
electronic taps and tracing wires to 
locate electronics 
o Audio Oscilloscope with active 
input (20Hz to 20KHz) 
o High Gain Audio Amplifier (20Hz to 
20KHz) 

o Digital Multimeter tests voltage, 
current, resistance & capacitance 
© Bias Generator +-80 VDC, direct 
digital control to use with Audio 
Amplifier, NLJD, and FDR. 
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© Automatic Internal 
Pair Switching 
automatically performs 
tests on all pair combina- 
tions 

© RF Broadband Detector tests 
lines for RF up to 8GHz 
© Multi-Test Database System 
performs multiple tests at once 
on all pair combinations, storing 
data in a database for 
comparison against other lines and 
historical comparison 



Expansion Port Banana Jacks MOD8/RJ45 



Buffered Line Input 



Microphone Jack 



Headphone Jack 



Built in Microphone 



8.4 inch (21.3cm) 

Touchscreen Display 800x600 
resolution 



DC Power Input 



RF Antenna Input 




Test Dashboard View 



PC Connections USB/Ethernet 



USB Keyboard Port Compact Flash Memory Port 



Antennas , Broadband Tuners , 
Signal Analysing 



Telephone Line Analyser Detector 
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system can be 
configured to record 
all traffic on the monito- 
red carriers/bearers. 



Such a passive monitoring system is 
capable of monitoring any configuration 
of protocols on its input carriers, inclu- 
ding: SS7 ISUP and TUB SS5, R2MFC. 
When no signaling is available recor- 
dings can be triggered on VOX. Future 
versions of the system will support 
H.323, SIP and other packet proto- 
cols. 



The philosophy of the Zebra passive 
monitoring system can be summarized 
as: store everything, filter for known tar- 
gets, and search the past for new tar- 
gets. 

The management of large amounts of 
carrier cable can be a challenge, espe- 
cially in large passive monitoring sys- 
tems. We offer a modular coupling sys- 
tem that supports the connectivity 
management of large numbers of mo- 
nitored carriers in conjunction with opti- 
onal high impedance buffering (Hi-Z) 
and LED indication of the status of pas- 
sively monitored carriers. 



User workstation - for filtering and 
browsing stored intercepts , playing au- 
dio and viewing fax/modem intercepts. 
The Zebra enhanced user station that 
will offer sophisticated filtering and 
searching, playback and visualization of 
content, as well as the viewing of 
fax/Internet sessions. 



The Zebra enhanced user station is also 
designed with integrated link/network 
analysis to assist investigators in the vi- 
sualization of associations between tar- 
gets. 



Passive 

Telephone Line 
Monitoring 

The Zebra system is a po- 
werful telecommunications 
monitoring solution. The Zebra 
system is suitable for law enforce- 
ment as well as intelligence gathering 
and is scalable from 16 El carriers (or 
equivalent channels) to more than 
5,000 El carriers (or equivalent) in one 
integrated system. Passive SS7, 
R2MFC and SS5 protocol stacks sup- 
port passive monitoring between swit- 
ches in a carrier network, as well as 
between the gateway switches. The 
same passive protocol stacks support 
interception of satellite streams. A pas- 
sive ISDN stack supports trunk-side in- 
terception of PBX traffic. 

The support for these interfaces and 
protocols allow the Zebra system to be 
applied to any type of monitoring in the 
carrier network, including PSTN and 
PLMN networks. 

Passively - the system connects passi- 
vely to carriers or bearers between 
switches. Hi-Z buffers hide the Zebra 
system from the monitored network. 
No additional load is placed on the mo- 
nitored network. Sessions on the moni- 
tored carriers/bearers are detected by 
protocol analysis or VOX activity. The 
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Administration workstation 
oUser management 
©Interception management - the 
configuration of intercepted carri- 
ers, including machine assisted 
SS7 CIC mapping and the auto- 
matic classification of SS5, SS7 sig- 
naling and SS7 audio channels 
©Signal and signaling analysis - al- 
lows the administrator to view sig- 
naling messages, listen in real-time 
to channels, manually record chan- 
nels and visualize the content of re- 
cordings 

©Health monitoring 




Zebra Architecture 



For further Information please 
don't hesitate to contact us at: 



elaman GmbH 

German Security 
Solutions 

Seitzstrasse 23 
80538 Munich 
Germany 

Tel: +49-89-24 20 91 80 
Fax: +49-89-24 20 91 81 

info@elaman.de 

www.elaman.de 

HRB Munchen 153662 
Ust-ldNr.: DE814086265 

Managing Director: 
Holger Rumscheidt 
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